导航至登录页面当JWT令牌过期。

huangapple go评论111阅读模式
英文:

Navigate to login when JWT token expires

问题

ProtectedRoutes.js

  1. import { Navigate, Outlet } from "react-router-dom";
  2. import jwt_decode from "jwt-decode";
  3. export default function ProtectedRoutes() {
  4. var token = sessionStorage.getItem("token");
  5. var decoded = jwt_decode(token);
  6. const isAuthActive = () => {
  7. const expiryTime = new Date(decoded.exp * 1000).toLocaleString(
  8. 'en-sg'
  9. );
  10. const currentTime = new Date().toLocaleString('en-sg');
  11. if (expiryTime < currentTime) {
  12. sessionStorage.remove("token");
  13. return <div>{isAuthActive ? <Outlet /> : <Navigate to="/auth/login" />}</div>;
  14. }
  15. return true;
  16. }
  17. let userid = sessionStorage.getItem("token") == null ? false : true;
  18. return <div>{userid ? <Outlet /> : <Navigate to="/auth/login" />}</div>;
  19. }

authService.js

  1. const login = async (formData) => {
  2. const response = await axios.post(
  3. `${import.meta.env.VITE_BACKEND_STAGING_URL}/api/v1/auth/signin`,
  4. formData
  5. );
  6. if (response.data) {
  7. const { token } = response.data;
  8. sessionStorage.setItem("token", token);
  9. }
  10. return response.data;
  11. };
  12. const logout = async () => {
  13. const response = await axios.post(
  14. `${import.meta.env.VITE_BACKEND_STAGING_URL}/api/v1/auth/logout`
  15. );
  16. if (response.data) {
  17. sessionStorage.removeItem("token");
  18. }
  19. return response.data;
  20. };

authSlice.js

  1. import { createSlice, createAsyncThunk } from "@reduxjs/toolkit";
  2. import authService from "./authService";
  3. const initialState = {
  4. user: localStorage.getItem('user') ? JSON.parse(localStorage.getItem('user')) : null,
  5. isLoading: false,
  6. isError: false,
  7. isSuccess: false,
  8. }
  9. export const login = createAsyncThunk("auth/signin", async (formData, thunkAPI) => {
  10. try {
  11. return await authService.login(formData);
  12. } catch (error) {
  13. const message =
  14. (error.response && error.response.data && error.response.data.message) ||
  15. error.message ||
  16. error.toString();
  17. return thunkAPI.rejectWithValue(message);
  18. }
  19. });
  20. export const logout = createAsyncThunk("auth/logout", async () => {
  21. await authService.logout();
  22. });
  23. const authSlice = createSlice({
  24. name: "auth",
  25. initialState,
  26. reducers: {
  27. reset: (state) => {
  28. (state.isLoading = false),
  29. (state.isSuccess = false),
  30. (state.isError = false),
  31. },
  32. },
  33. extraReducers: (builder) => {
  34. builder
  35. .addCase(login.pending, (state) => {
  36. state.isLoading = true;
  37. })
  38. .addCase(login.fulfilled, (state, action) => {
  39. state.isSuccess = true;
  40. state.user = action.payload;
  41. })
  42. .addCase(login.rejected, (state, action) => {
  43. state.isError = true;
  44. state.user = null;
  45. })
  46. .addCase(logout.pending, (state) => {
  47. state.isLoading = true;
  48. })
  49. .addCase(logout.fulfilled, (state) => {
  50. state.isSuccess = true;
  51. state.user = null;
  52. });
  53. },
  54. });
  55. export default authSlice.reducer;
英文:

Hi I'm quite new to this. I'm trying to navigate the user to the login page when the JWT token expires but I'm struggling with it. I was thinking maybe I need to set a timeout when the login action is dispatched? The token expires in 8 hours ( what the backend dev said ). I used jwt-decode to decode the token. I would appreciate any tip

ProtectedRoutes.js

<!-- begin snippet: js hide: false console: true babel: false -->

<!-- language: lang-js -->

  1. import { Navigate, Outlet } from &quot;react-router-dom&quot;;
  2. import jwt_decode from &quot;jwt-decode&quot;;
  3. export default function ProtectedRoutes() {
  4. var token = sessionStorage.getItem(&quot;token&quot;);
  5. var decoded = jwt_decode(token);
  6. // console.log(decoded);
  7. // console.log(decoded.exp)
  8. const isAuthActive = () =&gt; {
  9. const expiryTime = new Date(decoded.exp * 1000).toLocaleString(
  10. &#39;en-sg&#39;
  11. );
  12. const currentTime = new Date().toLocaleString(&#39;en-sg&#39;);
  13. if (expiryTime &lt; currentTime) {
  14. sessionStorage.remove(&quot;token&quot;);
  15. return &lt;div&gt;{isAuthActive ? &lt;Outlet /&gt; : &lt;Navigate to=&quot;/auth/login&quot; /&gt;}&lt;/div&gt;;
  16. }
  17. return true;
  18. }
  19. let userid = sessionStorage.getItem(&quot;token&quot;) == null ? false : true;
  20. return &lt;div&gt;{userid ? &lt;Outlet /&gt; : &lt;Navigate to=&quot;/auth/login&quot; /&gt;}&lt;/div&gt;;

<!-- end snippet -->

authService.js

<!-- begin snippet: js hide: false console: true babel: false -->

<!-- language: lang-js -->

  1. const login = async (formData) =&gt; {
  2. const response = await axios.post(
  3. `${import.meta.env.VITE_BACKEND_STAGING_URL}/api/v1/auth/signin`,
  4. formData
  5. );
  6. if (response.data) {
  7. const { token } = response.data;
  8. sessionStorage.setItem(&quot;token&quot;, token);
  9. }
  10. return response.data;
  11. };
  12. const logout = async () =&gt; {
  13. const response = await axios.post(
  14. `${import.meta.env.VITE_BACKEND_STAGING_URL}/api/v1/auth/logout`
  15. );
  16. if (response.data) {
  17. sessionStorage.removeItem(&quot;token&quot;);
  18. }
  19. return response.data;
  20. };

<!-- end snippet -->

authSlice.js

<!-- begin snippet: js hide: false console: true babel: false -->

<!-- language: lang-js -->

  1. import { createSlice, createAsyncThunk } from &quot;@reduxjs/toolkit&quot;;
  2. import authService from &quot;./authService&quot;;
  3. const initialState = {
  4. user: localStorage.getItem(&#39;user&#39;) ? JSON.parse(localStorage.getItem(&#39;user&#39;)) : null,
  5. isLoading: false,
  6. isError: false,
  7. isSuccess: false,
  8. }
  9. // User Login
  10. export const login = createAsyncThunk(&quot;auth/signin&quot;, async (formData, thunkAPI) =&gt; {
  11. try {
  12. return await authService.login(formData);
  13. } catch (error) {
  14. const message =
  15. (error.response &amp;&amp; error.response.data &amp;&amp; error.response.data.message) ||
  16. error.message ||
  17. error.toString();
  18. return thunkAPI.rejectWithValue(message);
  19. }
  20. });
  21. export const logout = createAsyncThunk(&quot;auth/logout&quot;, async () =&gt; {
  22. await authService.logout();
  23. });
  24. const authSlice = createSlice({
  25. name: &quot;auth&quot;,
  26. initialState,
  27. reducers: {
  28. reset: (state) =&gt; {
  29. (state.isLoading = false),
  30. (state.isSuccess = false),
  31. (state.isError = false),
  32. },
  33. },
  34. extraReducers: (builder) =&gt; {
  35. builder
  36. .addCase(login.pending, (state) =&gt; {
  37. state.isLoading = true;
  38. })
  39. .addCase(login.fulfilled, (state, action) =&gt; {
  40. state.isSuccess = true;
  41. state.user = action.payload;
  42. })
  43. .addCase(login.rejected, (state, action) =&gt; {
  44. state.isError = true;
  45. state.user = null;
  46. })
  47. .addCase(logout.pending, (state) =&gt; {
  48. state.isLoading = true;
  49. })
  50. .addCase(logout.fulfilled, (state) =&gt; {
  51. state.isSuccess = true;
  52. state.user = null;
  53. });
  54. },
  55. });
  56. export default authSlice.reducer;

<!-- end snippet -->

答案1

得分: 1

如果你希望在令牌过期后立即取消用户身份验证并重定向到登录页面,我建议使用useEffect钩子回调来检查当前令牌值的过期时间,并在“会话”期间或在应用程序启动/挂载时如果令牌已过期,则有条件地设置一个超时来在令牌过期时注销并重定向用户。

示例:

  1. const App = () => {
  2. const navigate = useNavigate();
  3. const dispatch = useDispatch();
  4. const token = useSelector(state => state.auth.user.token);
  5. useEffect(() => {
  6. let timerRef = null;
  7. const decoded = jwt_decode(token);
  8. const expiryTime = (new Date(decoded.exp * 1000)).getTime();
  9. const currentTime = (new Date()).getTime();
  10. const timeout = expiryTime - currentTime;
  11. const onExpire = () => {
  12. dispatch(logout());
  13. navigate("/auth/login");
  14. };
  15. if (timeout > 0) {
  16. // 令牌未过期,设置未来的超时以注销并重定向
  17. timerRef = setTimeout(onExpire, timeout);
  18. } else {
  19. // 令牌已过期,注销并重定向
  20. onExpire();
  21. }
  22. // 在组件卸载或令牌状态更改时清除任何正在运行的定时器
  23. return () => {
  24. clearTimeout(timerRef);
  25. };
  26. }, [dispatch, navigate, token]);
  27. // ...
  28. };
英文:

If you would like the user to be deauthenticated and redirected to log in again as soon as the token expires then I would suggest using a mounting useEffect hook callback to check the current token value's expiration and conditionally set a timeout when the token will expire during a "session" or if as soon as the app starts/mounts it is already expired to log out and redirect the user.

Example:

  1. const App = () =&gt; {
  2. const navigate = useNavigate();
  3. const dispatch = useDispatch();
  4. const token = useSelector(state =&gt; state.auth.user.token);
  5. useEffect(() =&gt; {
  6. let timerRef = null;
  7. const decoded = jwt_decode(token);
  8. const expiryTime = (new Date(decoded.exp * 1000)).getTime();
  9. const currentTime = (new Date()).getTime();
  10. cont timeout = expiryTime - currentTime;
  11. const onExpire = () =&gt; {
  12. dispatch(logout());
  13. navigate(&quot;/auth/login&quot;);
  14. };
  15. if (timeout &gt; 0) {
  16. // token not expired, set future timeout to log out and redirect
  17. timerRef = setTimeout(onExpire, timeout);
  18. } else {
  19. // token expired, log out and redirect
  20. onExpire();
  21. }
  22. // Clear any running timers on component unmount or token state change
  23. return () =&gt; {
  24. clearTimeout(timerRef);
  25. };
  26. }, [dispatch, navigate, token]);
  27. ...
  28. };

huangapple
  • 本文由 发表于 2023年7月17日 15:23:03
  • 转载请务必保留本文链接:https://go.coder-hub.com/76702258.html
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定